The fact that one worker was able to take down the president’s account left people asking whether Twitter has appropriate internal controls.

The early consensus seems to be “no.”

“This is a case of human negligence and lack of process in place,” said Subramanian Udaiyappan, a Bangalore-based cybersecurity specialist at Cisco. “Twitter needs to ensure that only the right people have access to such actions and these have to go through process permissions, approvals and logging before any action is taken by an employee.”